Catalog Home Page

A policy language for abstraction and automation in application-oriented access controls: The Functionality-based application confinement policy language

Schreuders, Z.C., Payne, C. and McGill, T.J. (2011) A policy language for abstraction and automation in application-oriented access controls: The Functionality-based application confinement policy language. In: IEEE International Symposium on Policies for Distributed Systems and Networks (POLICY 2011), 6 - 8 June 2011, Pisa, Italy pp. 113-116.

[img]
Preview
PDF - Authors' Version
Download (86kB)
Link to Published Version: http://dx.doi.org/10.1109/POLICY.2011.11
*Subscription may be required

Abstract

This paper presents a new policy language, known as functionality-based application confinement policy language (FBAC-PL). FBAC-PL takes a unique approach to expressing application-oriented access control policies. Policies for restricting applications are defined in terms of the features applications provide, by means of parameterised and hierarchical policy abstractions known as functionalities. Policies also include metadata for management and the automation of policy specification. The result is a novel scheme for application confinement policy that reuses, encapsulates and abstracts policy details, and facilitates a priori policy specification: that is, without having to rely solely on learning modes for creating policies to restrict applications. This paper presents the policy language, and illustrates its use with examples. A Linux-based implementation, which uses FBAC-PL, has demonstrated that this approach can overcome policy complexity and usability issues of previous schemes.

Publication Type: Conference Paper
Murdoch Affiliation: School of Information Technology
Publisher: IEEE
Copyright: 2011 IEEE
Conference Website: http://www.policy-workshop.org/
Notes: Appears In: Policies for Distributed Systems and Networks (POLICY), 2011
URI: http://researchrepository.murdoch.edu.au/id/eprint/4371
Item Control Page Item Control Page

Downloads

Downloads per month over past year